This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa File: 338cbdf4-937d-41ee-8ec5-ca45e166a036.roa (raw, json) Hash identifier: 6bSthd0gs912yBqWEphoHmF31joOD7rui0o3r7KQeJY= Subject key identifier: 8E:68:16:E1:D1:23:31:53:3A:19:86:38:F1:85:89:42:0C:8A:0E:4B Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 5B6C9E0BC7E3B533C7F096E84F205581F88D958E Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa Signing time: Sat 15 Nov 2025 06:40:52 +0000 ROA not before: Sat 15 Nov 2025 06:40:52 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 7224 IP address blocks: 193.57.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6c:9e:0b:c7:e3:b5:33:c7:f0:96:e8:4f:20:55:81:f8:8d:95:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:52 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=faafc0d3fa10ca5adcbfc940b582ed50a59dac01b87713b2d2fb54e6a9693ff7, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:65:29:e1:36:29:6b:d5:62:2a:ea:a9:f0: 0b:55:af:84:bf:65:ce:bc:0f:e5:cb:d0:61:a5:61: 7b:a1:01:e1:be:b8:aa:24:45:e5:e7:b4:1b:9c:1b: 7d:51:a5:5d:da:f9:b1:49:01:6a:36:d3:c0:18:b2: 97:a4:d3:5c:e8:80:b1:91:be:6f:34:a9:f8:b6:ed: 1a:cc:bd:8f:e7:ac:ef:25:95:91:f2:a9:5c:1d:6c: ef:c4:88:eb:c9:b2:aa:4e:da:ba:5c:7f:b0:4d:b0: f2:da:1e:be:22:1d:8b:21:f0:3c:38:c1:ef:eb:f8: c7:13:db:09:90:90:2b:0d:18:d7:7e:f2:3c:fd:df: c3:29:8c:be:4b:d7:05:25:e5:9c:90:8f:29:63:fe: b8:d9:6b:37:fa:7c:7d:f6:80:8c:4c:1e:d1:78:b4: 4c:45:1e:ad:d2:a6:b7:e9:e8:1f:9e:d0:c3:76:7b: 59:6e:a6:9a:0b:a0:11:2c:72:d3:fc:94:26:48:32: e8:c1:f7:f3:a6:57:84:d2:13:81:90:c5:7c:3d:3f: d2:7d:87:e3:12:eb:a8:38:95:ff:61:b8:bb:fe:55: c3:e2:03:3f:56:72:9a:59:e7:6a:3d:67:4a:d3:84: cc:59:ad:e2:f7:a2:ed:13:7e:fb:7f:a9:43:cf:87: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:16:E1:D1:23:31:53:3A:19:86:38:F1:85:89:42:0C:8A:0E:4B X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.182.0/23 Signature Algorithm: sha256WithRSAEncryption 29:fc:4e:9e:a3:4c:e7:f7:16:53:64:bc:3e:71:ae:8f:3d:a8: 04:1c:74:55:ed:42:d7:9b:a0:f1:16:5b:41:b4:20:54:60:80: d5:c3:34:41:ac:bc:6e:9e:7e:c7:08:0b:50:b8:98:f5:db:2e: f1:01:e5:39:e0:f6:8d:e8:4a:50:a8:91:cc:3d:a7:1d:a3:a1: a2:23:56:2a:39:ac:16:76:e4:da:b6:b6:26:b0:3a:53:63:a3: a5:c4:9e:5d:99:9b:f3:2c:11:8f:51:fb:f9:00:da:2d:7e:b3: cc:86:c7:2e:94:54:13:b3:34:45:42:c5:15:4a:bd:c1:a2:23: e1:d3:3a:03:a9:f7:19:a5:8f:18:94:e6:8f:7a:c9:67:e1:f1: 19:e8:84:53:7d:c4:b1:0b:d2:1f:60:cd:cc:a0:1c:80:c6:25: 10:8a:46:17:95:77:61:71:43:25:da:27:0c:eb:35:7a:19:73: cc:07:56:c9:ec:ac:82:eb:48:e4:e5:ae:6a:15:3c:27:35:8d: 2c:34:3b:bf:1e:f4:72:a8:4e:45:30:e4:01:1a:16:74:93:79: d6:6a:05:5e:f6:ca:a2:74:4f:c8:e3:e8:10:94:4a:46:26:8a: 53:3f:da:b4:df:26:55:26:5e:41:99:fb:2c:b2:38:08:0f:b1: c8:37:55:18 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUW2yeC8fjtTPH8JboTyBVgfiNlY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwNTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGZhYWZjMGQzZmExMGNhNWFkY2JmYzk0MGI1ODJlZDUwYTU5ZGFjMDFiODc3 MTNiMmQyZmI1NGU2YTk2OTNmZjcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKv8ZSnhNilr1WIq6qnwC1WvhL9lzrwP5cvQYaVhe6EB4b64qiRF5ee0G5wb fVGlXdr5sUkBajbTwBiyl6TTXOiAsZG+bzSp+LbtGsy9j+es7yWVkfKpXB1s78SI 68myqk7aulx/sE2w8toeviIdiyHwPDjB7+v4xxPbCZCQKw0Y137yPP3fwymMvkvX BSXlnJCPKWP+uNlrN/p8ffaAjEwe0Xi0TEUerdKmt+noH57Qw3Z7WW6mmgugESxy 0/yUJkgy6MH386ZXhNITgZDFfD0/0n2H4xLrqDiV/2G4u/5Vw+IDP1Zymlnnaj1n StOEzFmt4vei7RN++3+pQ8+HMSMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSOaBbh 0SMxUzoZhjjxhYlCDIoOSzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MzM4Y2JkZjQtOTM3ZC00MWVlLThlYzUtY2E0NWUxNjZhMDM2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN BgkqhkiG9w0BAQsFAAOCAQEAKfxOnqNM5/cWU2S8PnGujz2oBBx0Ve1C15ug8RZb QbQgVGCA1cM0Qay8bp5+xwgLULiY9dsu8QHlOeD2jehKUKiRzD2nHaOhoiNWKjms Fnbk2ra2JrA6U2OjpcSeXZmb8ywRj1H7+QDaLX6zzIbHLpRUE7M0RULFFUq9waIj 4dM6A6n3GaWPGJTmj3rJZ+HxGeiEU33EsQvSH2DNzKAcgMYlEIpGF5V3YXFDJdon DOs1ehlzzAdWyeysgutI5OWuahU8JzWNLDQ7vx70cqhORTDkARoWdJN51moFXvbK onRPyOPoEJRKRiaKUz/atN8mVSZeQZn7LLI4CA+xyDdVGA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:58 2025 by rpki-client